Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04786A84C92011EFB01DBE85762E951A.roa
File: 04786A84C92011EFB01DBE85762E951A.roa (raw, json)
Hash identifier: CVM8ZKXP1ezXGd0+Nrne4vqca4ux1q1CTBAZwR7hDlQ=
Subject key identifier: 73:90:CF:6B:1F:BC:BA:AF:4D:9F:6B:F7:3C:BE:73:04:D9:30:50:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013323
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04786A84C92011EFB01DBE85762E951A.roa
Signing time: Thu 02 Jan 2025 15:41:22 +0000
ROA not before: Thu 02 Jan 2025 15:41:19 +0000
ROA not after: Sat 13 Dec 2025 15:41:19 +0000
asID: 984
IP address blocks: 154.222.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78627 (0x13323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:41:19 2025 GMT
Not After : Dec 13 15:41:19 2025 GMT
Subject: CN=6776b3a2-d9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:f1:8b:40:ad:0c:65:9d:1b:e3:3d:39:cb:
40:b9:e2:64:2d:3f:16:8c:ad:72:a8:49:99:3f:58:
49:ea:64:20:74:be:70:d9:0c:04:82:85:47:0e:d4:
ea:4a:32:35:36:37:0c:ca:85:fe:43:38:89:b3:45:
e8:26:c0:99:b7:3e:76:40:c7:fe:c2:91:4b:61:ce:
8b:06:1a:44:20:ca:e1:46:8e:5e:79:e3:d1:fb:5c:
aa:33:72:2e:d1:b4:d7:ad:82:dc:98:5e:3b:d2:56:
f9:05:1d:f0:00:df:55:42:6b:ec:28:e0:1b:66:b1:
80:5b:b0:3d:1f:0f:26:41:d3:41:7c:3e:b9:09:7b:
01:0e:c9:5d:e1:8d:1b:6b:b5:91:74:45:5b:dd:59:
2c:07:5a:07:90:31:93:82:ff:e1:20:dc:e8:c0:b8:
ea:46:35:39:bf:09:5b:23:47:8b:23:b0:e2:e6:7c:
8f:62:b0:28:3f:16:20:f8:a1:44:78:a5:d8:67:9a:
3f:e5:b9:0a:4e:f5:fe:38:87:c3:5b:43:33:4e:7f:
e5:16:97:c6:a4:fc:12:f1:b6:16:66:6e:41:0e:50:
73:e0:60:6b:ac:62:87:f0:c6:4b:ce:56:8f:74:9e:
c8:b5:ce:66:5f:d9:df:4a:92:1a:bf:a5:49:cb:cd:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:90:CF:6B:1F:BC:BA:AF:4D:9F:6B:F7:3C:BE:73:04:D9:30:50:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04786A84C92011EFB01DBE85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.86.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:50:7f:f3:e4:ab:eb:a4:fc:31:d2:0b:cd:f1:18:28:3b:36:
5c:ef:0a:ed:dc:87:be:05:16:b4:73:0e:f1:7e:87:db:30:e3:
a0:98:5c:75:ae:71:0b:05:f8:93:44:21:7e:8f:f8:f5:5f:2a:
79:02:b9:16:48:8b:ea:db:e8:bb:90:4b:68:47:d9:9e:ca:c5:
c9:9f:62:c1:b2:12:74:6c:58:f0:41:85:50:80:e3:36:a9:36:
15:f2:8c:ce:e7:4a:ff:7d:a0:70:82:67:67:aa:08:73:bb:99:
f7:82:a5:fb:47:a0:c5:2a:18:9e:fa:88:3c:28:fc:12:ac:76:
e3:6c:59:b2:c9:6e:a5:3f:fb:62:35:ce:7f:4a:52:46:6e:ab:
bf:3a:55:e6:4e:e4:ef:53:94:91:b3:39:0b:3d:ac:0a:f1:d7:
f9:5e:4a:4c:1e:f5:fb:cf:2f:ba:2c:88:44:e0:48:34:5b:e4:
b4:c2:7e:c2:8c:5e:43:08:5a:f5:c3:bb:4c:02:b0:da:cd:00:
9d:cc:02:fd:ba:3c:49:50:fb:80:9a:91:9d:b3:e7:61:a4:ab:
75:1f:8e:c8:10:af:64:c4:2a:b1:e3:05:6f:8b:5c:9a:36:46:
0d:74:74:bf:64:e6:ff:3e:87:7c:99:74:d5:05:35:26:83:68:
99:d2:83:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:16:51 2025 by rpki-client